@viberaven/mcp 1.4.4 → 1.5.0

package/dist/lib/cli-runner.js

@@ -26,13 +26,57 @@ __export(cli_runner_exports, {
   buildHealArgs: () => buildHealArgs,
   buildNpxCommand: () => buildNpxCommand,
   buildToolArgs: () => buildToolArgs,
+  cliChildEnv: () => cliChildEnv,
+  cliNpxArgs: () => cliNpxArgs,
+  cliPackageSpec: () => cliPackageSpec,
+  mcpVersion: () => mcpVersion,
   resolveCwd: () => resolveCwd,
   runVibeRaven: () => runVibeRaven,
   safeStringArg: () => safeStringArg
 });
 module.exports = __toCommonJS(cli_runner_exports);
 var import_node_child_process = require("node:child_process");
+var import_node_fs = require("node:fs");
+var import_node_path = require("node:path");
 var CLI_PACKAGE = "@viberaven/cli";
+var MCP_PACKAGE = "@viberaven/mcp";
+var PLAIN_VERSION = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+var cachedVersion;
+function mcpVersion() {
+  if (cachedVersion) return cachedVersion;
+  let found;
+  for (let dir = __dirname, depth = 0; depth < 4 && !found; depth += 1, dir = (0, import_node_path.dirname)(dir)) {
+    try {
+      const manifest = JSON.parse((0, import_node_fs.readFileSync)((0, import_node_path.join)(dir, "package.json"), "utf8"));
+      if (manifest.name === MCP_PACKAGE && typeof manifest.version === "string") found = manifest.version;
+    } catch {
+    }
+  }
+  found ??= true ? "1.5.0" : void 0;
+  if (!found || !PLAIN_VERSION.test(found)) {
+    throw new Error(`Could not read a valid ${MCP_PACKAGE} version (got ${JSON.stringify(found)}), so the matching ${CLI_PACKAGE} cannot be pinned.`);
+  }
+  cachedVersion = found;
+  return found;
+}
+function cliPackageSpec() {
+  return `${CLI_PACKAGE}@${mcpVersion()}`;
+}
+var CLI_BIN = "viberaven";
+function cliNpxArgs(args) {
+  return ["-y", `--package=${cliPackageSpec()}`, "--", CLI_BIN, ...args];
+}
+var KEPT_NPM_CONFIG = /^(?:registry|.+:registry|proxy|https?_proxy|no_?proxy|cafile|ca|cert|key|strict_ssl|cache|offline|prefer_offline|prefer_online|fetch_.+|maxsockets|always_auth|_auth|_authtoken|.+:_auth|.+:_authtoken)$/;
+function cliChildEnv(env = process.env) {
+  const out = {};
+  for (const [key, value] of Object.entries(env)) {
+    const lower = key.toLowerCase();
+    if (lower.startsWith("npm_package_") || lower.startsWith("npm_lifecycle_")) continue;
+    if (lower.startsWith("npm_config_") && !KEPT_NPM_CONFIG.test(lower.slice("npm_config_".length))) continue;
+    out[key] = value;
+  }
+  return out;
+}
 var spawnFn = import_node_child_process.spawn;
 function __setSpawnForTest(fn) {
   spawnFn = fn;
@@ -113,11 +157,17 @@ function buildToolArgs(name, args) {
   }
 }
 function runVibeRaven(args, cwd) {
+  let npxArgs;
+  try {
+    npxArgs = cliNpxArgs(args);
+  } catch (error) {
+    return Promise.resolve(`ERROR: ${error instanceof Error ? error.message : String(error)}`);
+  }
   return new Promise((resolve) => {
-    const built = buildNpxCommand(["-y", CLI_PACKAGE, ...args]);
+    const built = buildNpxCommand(npxArgs);
     const child = spawnFn(built.command, built.args, {
       cwd: resolveCwd(cwd),
-      env: process.env,
+      env: cliChildEnv(),
       shell: built.shell,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -144,6 +194,10 @@ ${combined}` : ""}`);
   buildHealArgs,
   buildNpxCommand,
   buildToolArgs,
+  cliChildEnv,
+  cliNpxArgs,
+  cliPackageSpec,
+  mcpVersion,
   resolveCwd,
   runVibeRaven,
   safeStringArg

package/dist/server.js

@@ -175,7 +175,47 @@ var npmTools = [
 
 // src/lib/cli-runner.ts
 var import_node_child_process = require("node:child_process");
+var import_node_fs = require("node:fs");
+var import_node_path = require("node:path");
 var CLI_PACKAGE = "@viberaven/cli";
+var MCP_PACKAGE = "@viberaven/mcp";
+var PLAIN_VERSION = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+var cachedVersion;
+function mcpVersion() {
+  if (cachedVersion) return cachedVersion;
+  let found;
+  for (let dir = __dirname, depth = 0; depth < 4 && !found; depth += 1, dir = (0, import_node_path.dirname)(dir)) {
+    try {
+      const manifest = JSON.parse((0, import_node_fs.readFileSync)((0, import_node_path.join)(dir, "package.json"), "utf8"));
+      if (manifest.name === MCP_PACKAGE && typeof manifest.version === "string") found = manifest.version;
+    } catch {
+    }
+  }
+  found ??= true ? "1.5.0" : void 0;
+  if (!found || !PLAIN_VERSION.test(found)) {
+    throw new Error(`Could not read a valid ${MCP_PACKAGE} version (got ${JSON.stringify(found)}), so the matching ${CLI_PACKAGE} cannot be pinned.`);
+  }
+  cachedVersion = found;
+  return found;
+}
+function cliPackageSpec() {
+  return `${CLI_PACKAGE}@${mcpVersion()}`;
+}
+var CLI_BIN = "viberaven";
+function cliNpxArgs(args) {
+  return ["-y", `--package=${cliPackageSpec()}`, "--", CLI_BIN, ...args];
+}
+var KEPT_NPM_CONFIG = /^(?:registry|.+:registry|proxy|https?_proxy|no_?proxy|cafile|ca|cert|key|strict_ssl|cache|offline|prefer_offline|prefer_online|fetch_.+|maxsockets|always_auth|_auth|_authtoken|.+:_auth|.+:_authtoken)$/;
+function cliChildEnv(env = process.env) {
+  const out = {};
+  for (const [key, value] of Object.entries(env)) {
+    const lower = key.toLowerCase();
+    if (lower.startsWith("npm_package_") || lower.startsWith("npm_lifecycle_")) continue;
+    if (lower.startsWith("npm_config_") && !KEPT_NPM_CONFIG.test(lower.slice("npm_config_".length))) continue;
+    out[key] = value;
+  }
+  return out;
+}
 var spawnFn = import_node_child_process.spawn;
 function safeStringArg(value, label) {
   if (typeof value !== "string") throw new Error(`Invalid ${label}: expected string`);
@@ -250,11 +290,17 @@ function buildToolArgs(name, args) {
   }
 }
 function runVibeRaven(args, cwd) {
+  let npxArgs;
+  try {
+    npxArgs = cliNpxArgs(args);
+  } catch (error) {
+    return Promise.resolve(`ERROR: ${error instanceof Error ? error.message : String(error)}`);
+  }
   return new Promise((resolve) => {
-    const built = buildNpxCommand(["-y", CLI_PACKAGE, ...args]);
+    const built = buildNpxCommand(npxArgs);
     const child = spawnFn(built.command, built.args, {
       cwd: resolveCwd(cwd),
-      env: process.env,
+      env: cliChildEnv(),
       shell: built.shell,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -315,7 +361,7 @@ async function handleRequest(method, params) {
 }
 
 // src/server.ts
-var SERVER_INFO = { name: "viberaven-mcp", version: "1.4.4" };
+var SERVER_INFO = { name: "viberaven-mcp", version: "1.5.0" };
 var server = new import_server.Server(SERVER_INFO, { capabilities: { tools: {} } });
 server.setRequestHandler(
   import_types.ListToolsRequestSchema,

package/dist/tools/index.js

@@ -176,7 +176,47 @@ var npmTools = [
 
 // src/lib/cli-runner.ts
 var import_node_child_process = require("node:child_process");
+var import_node_fs = require("node:fs");
+var import_node_path = require("node:path");
 var CLI_PACKAGE = "@viberaven/cli";
+var MCP_PACKAGE = "@viberaven/mcp";
+var PLAIN_VERSION = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+var cachedVersion;
+function mcpVersion() {
+  if (cachedVersion) return cachedVersion;
+  let found;
+  for (let dir = __dirname, depth = 0; depth < 4 && !found; depth += 1, dir = (0, import_node_path.dirname)(dir)) {
+    try {
+      const manifest = JSON.parse((0, import_node_fs.readFileSync)((0, import_node_path.join)(dir, "package.json"), "utf8"));
+      if (manifest.name === MCP_PACKAGE && typeof manifest.version === "string") found = manifest.version;
+    } catch {
+    }
+  }
+  found ??= true ? "1.5.0" : void 0;
+  if (!found || !PLAIN_VERSION.test(found)) {
+    throw new Error(`Could not read a valid ${MCP_PACKAGE} version (got ${JSON.stringify(found)}), so the matching ${CLI_PACKAGE} cannot be pinned.`);
+  }
+  cachedVersion = found;
+  return found;
+}
+function cliPackageSpec() {
+  return `${CLI_PACKAGE}@${mcpVersion()}`;
+}
+var CLI_BIN = "viberaven";
+function cliNpxArgs(args) {
+  return ["-y", `--package=${cliPackageSpec()}`, "--", CLI_BIN, ...args];
+}
+var KEPT_NPM_CONFIG = /^(?:registry|.+:registry|proxy|https?_proxy|no_?proxy|cafile|ca|cert|key|strict_ssl|cache|offline|prefer_offline|prefer_online|fetch_.+|maxsockets|always_auth|_auth|_authtoken|.+:_auth|.+:_authtoken)$/;
+function cliChildEnv(env = process.env) {
+  const out = {};
+  for (const [key, value] of Object.entries(env)) {
+    const lower = key.toLowerCase();
+    if (lower.startsWith("npm_package_") || lower.startsWith("npm_lifecycle_")) continue;
+    if (lower.startsWith("npm_config_") && !KEPT_NPM_CONFIG.test(lower.slice("npm_config_".length))) continue;
+    out[key] = value;
+  }
+  return out;
+}
 var spawnFn = import_node_child_process.spawn;
 function __setSpawnForTest(fn) {
   spawnFn = fn;
@@ -257,11 +297,17 @@ function buildToolArgs(name, args) {
   }
 }
 function runVibeRaven(args, cwd) {
+  let npxArgs;
+  try {
+    npxArgs = cliNpxArgs(args);
+  } catch (error) {
+    return Promise.resolve(`ERROR: ${error instanceof Error ? error.message : String(error)}`);
+  }
   return new Promise((resolve) => {
-    const built = buildNpxCommand(["-y", CLI_PACKAGE, ...args]);
+    const built = buildNpxCommand(npxArgs);
     const child = spawnFn(built.command, built.args, {
       cwd: resolveCwd(cwd),
-      env: process.env,
+      env: cliChildEnv(),
       shell: built.shell,
       stdio: ["ignore", "pipe", "pipe"]
     });

package/package.json

@@ -1,56 +1,56 @@
-{
-  "name": "@viberaven/mcp",
-  "version": "1.4.4",
-  "description": "MCP server for VibeRaven production-readiness: check_readiness, verify, heal, audit, and strict gate tools for Cursor, Claude Code, and Codex.",
-  "license": "MIT",
-  "author": "VibeRaven",
-  "mcpName": "io.github.ohad6k/viberaven",
-  "homepage": "https://viberaven.dev/mcp.md",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/ohad6k/VibeRaven.git",
-    "directory": "packages/mcp"
-  },
-  "bugs": {
-    "url": "https://github.com/ohad6k/VibeRaven/issues"
-  },
-  "keywords": [
-    "viberaven",
-    "mcp",
-    "claude-code",
-    "codex",
-    "cursor",
-    "launch-readiness",
-    "production"
-  ],
-  "publishConfig": {
-    "access": "public",
-    "tag": "latest"
-  },
-  "bin": {
-    "viberaven-mcp": "dist/server.js"
-  },
-  "files": [
-    "dist",
-    "README.md"
-  ],
-  "engines": {
-    "node": ">=20"
-  },
-  "scripts": {
-    "build": "node scripts/build.mjs",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "presmoke": "npm run build",
-    "smoke": "node scripts/smoke.mjs",
-    "pretest": "npm run build",
-    "test": "vitest run"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0"
-  },
-  "devDependencies": {
-    "esbuild": "^0.25.0",
-    "typescript": "^5.8.0",
-    "vitest": "^3.2.0"
-  }
-}
+{
+  "name": "@viberaven/mcp",
+  "version": "1.5.0",
+  "description": "MCP server for VibeRaven production-readiness: check_readiness, verify, heal, audit, and strict gate tools for Cursor, Claude Code, and Codex.",
+  "license": "MIT",
+  "author": "VibeRaven",
+  "mcpName": "io.github.ohad6k/viberaven",
+  "homepage": "https://viberaven.dev/mcp.md",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ohad6k/VibeRaven.git",
+    "directory": "packages/mcp"
+  },
+  "bugs": {
+    "url": "https://github.com/ohad6k/VibeRaven/issues"
+  },
+  "keywords": [
+    "viberaven",
+    "mcp",
+    "claude-code",
+    "codex",
+    "cursor",
+    "launch-readiness",
+    "production"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "bin": {
+    "viberaven-mcp": "dist/server.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "node scripts/build.mjs",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "presmoke": "npm run build",
+    "smoke": "node scripts/smoke.mjs",
+    "pretest": "npm run build",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0"
+  },
+  "devDependencies": {
+    "esbuild": "^0.25.0",
+    "typescript": "^5.8.0",
+    "vitest": "^3.2.0"
+  }
+}